Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0579e46-2458-373a-9f50-dbac58ad9af2.roa
File:                     b0579e46-2458-373a-9f50-dbac58ad9af2.roa (raw, json)
Hash identifier:          5c5Zl0C+PNV/qltWPJpljDWBccIimx18ykO8OwI9j/w=
Subject key identifier:   DA:7B:15:E9:6F:19:D6:F8:53:9A:BE:E5:AB:75:73:D3:9F:3E:66:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB16A371B99F71E52105480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0579e46-2458-373a-9f50-dbac58ad9af2.roa
Signing time:             Thu 12 Jun 2025 12:42:11 +0000
ROA not before:           Thu 12 Jun 2025 12:42:11 +0000
ROA not after:            Wed 10 Sep 2025 12:42:11 +0000
asID:                     396572
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:6a:37:1b:99:f7:1e:52:10:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:11 2025 GMT
            Not After : Sep 10 12:42:11 2025 GMT
        Subject: CN=89d0e898-6217-475d-8c83-7c8358052d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:68:12:3d:27:68:21:c8:d4:8f:d6:c4:dc:
                    22:81:52:6e:85:54:42:d6:13:c7:46:3a:01:63:97:
                    b0:07:e9:29:8b:91:3a:d1:63:3c:28:00:d2:ad:f0:
                    69:9c:ff:9c:e7:78:26:6f:45:f7:76:40:6b:1f:4d:
                    7d:ed:56:b2:37:51:de:92:53:e4:31:e4:ec:96:6b:
                    bd:7d:e1:8d:81:94:94:af:b5:da:43:4c:5f:77:6d:
                    22:03:72:17:94:a8:d6:77:5e:d5:da:f0:80:22:b4:
                    2a:9f:82:bf:e7:ef:28:97:fe:69:71:c6:7e:0f:d7:
                    ff:8a:14:90:f0:68:59:34:da:fb:a6:63:cb:07:80:
                    92:72:ab:4d:72:ac:e4:27:59:93:3e:3b:4d:02:c5:
                    10:a4:f5:2a:68:e7:4d:f8:cd:05:94:91:cc:58:48:
                    d4:b1:36:cc:9a:e7:50:a1:58:1c:9b:7a:30:fc:79:
                    4d:df:d2:e9:ed:8a:f2:7b:a9:41:84:25:2e:bc:ee:
                    5c:63:bb:a3:2f:f0:01:c4:98:8b:65:59:06:99:cb:
                    ec:dc:d5:1a:3d:23:84:30:3e:97:58:ce:ff:ee:ea:
                    55:85:b6:d8:15:83:07:55:51:0a:63:ee:8a:3c:71:
                    d8:57:44:ec:d5:ed:5d:84:bd:26:7d:8c:46:29:62:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7B:15:E9:6F:19:D6:F8:53:9A:BE:E5:AB:75:73:D3:9F:3E:66:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0579e46-2458-373a-9f50-dbac58ad9af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:18:8c:f3:75:83:a0:32:ff:72:af:00:45:56:fe:cc:80:e1:
         91:85:16:66:8b:cf:d0:31:25:be:65:24:7c:80:86:71:2a:56:
         0a:19:9e:c8:81:b8:82:76:6d:d7:cd:f7:c6:6d:94:dd:d1:a0:
         ae:6c:a4:26:b2:81:e8:f0:0c:a3:8d:14:87:49:4d:6e:c0:e7:
         e3:10:70:c4:ef:4a:ea:b9:06:be:87:f7:2a:a2:13:b9:af:b7:
         d4:39:70:1a:6c:cc:8c:79:c5:7b:52:2d:41:4b:84:55:ad:88:
         54:02:97:df:21:54:06:a3:4b:81:de:b3:97:bb:71:48:f5:a3:
         ab:aa:f9:bb:a2:b1:7e:12:31:4d:31:6c:9c:9c:19:00:38:6d:
         7f:11:98:05:be:d3:4e:60:66:37:33:a7:9c:d2:93:1d:3d:d6:
         70:99:42:bf:60:9d:b0:3c:85:18:8e:76:e3:f2:e7:3f:06:e7:
         e8:2b:62:51:ca:45:e9:a4:2d:1c:6a:06:47:b2:05:95:8f:94:
         95:81:46:b3:5b:5f:a9:25:ed:e9:50:d3:96:ec:7b:74:f5:6d:
         6d:0e:dd:30:17:ae:9f:bc:41:bd:85:d1:3d:0e:d0:02:64:61:
         65:c4:57:ba:cb:90:84:e3:40:94:1f:49:75:12:80:a0:42:0e:
         9f:f6:32:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWo3G5n3HlIQVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMjEyNDIxMVoXDTI1MDkxMDEyNDIxMVowLzEtMCsGA1UEAxMk
ODlkMGU4OTgtNjIxNy00NzVkLThjODMtN2M4MzU4MDUyZDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfRoEj0naCHI1I/WxNwigVJuhVRC1hPHRjoB
Y5ewB+kpi5E60WM8KADSrfBpnP+c53gmb0X3dkBrH0197VayN1HeklPkMeTslmu9
feGNgZSUr7XaQ0xfd20iA3IXlKjWd17V2vCAIrQqn4K/5+8ol/5pccZ+D9f/ihSQ
8GhZNNr7pmPLB4CScqtNcqzkJ1mTPjtNAsUQpPUqaOdN+M0FlJHMWEjUsTbMmudQ
oVgcm3ow/HlN39Lp7Yrye6lBhCUuvO5cY7ujL/ABxJiLZVkGmcvs3NUaPSOEMD6X
WM7/7upVhbbYFYMHVVEKY+6KPHHYV0Ts1e1dhL0mfYxGKWI1WwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNp7FelvGdb4U5q+5at1c9OfPma/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjA1NzllNDYtMjQ1OC0z
NzNhLTlmNTAtZGJhYzU4YWQ5YWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ4YjPN1g6Ay/3KvAEVW/syA4ZGFFmaLz9AxJb5lJHyAhnEqVgoZ
nsiBuIJ2bdfN98ZtlN3RoK5spCaygejwDKONFIdJTW7A5+MQcMTvSuq5Br6H9yqi
E7mvt9Q5cBpszIx5xXtSLUFLhFWtiFQCl98hVAajS4Hes5e7cUj1o6uq+buisX4S
MU0xbJycGQA4bX8RmAW+005gZjczp5zSkx091nCZQr9gnbA8hRiOduPy5z8G5+gr
YlHKRemkLRxqBkeyBZWPlJWBRrNbX6kl7elQ05bse3T1bW0O3TAXrp+8Qb2F0T0O
0AJkYWXEV7rLkITjQJQfSXUSgKBCDp/2Mn4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:52:54 2025 by rpki-client